--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T00:29:31Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: metrics-server managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-10-31T00:29:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-10-31T00:29:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T00:29:40Z" name: system:openshift:openshift-monitoring-vwj7s resourceVersion: "6752" uid: eef46886-5dc3-4149-8705-4ec37344b9af spec: extra: authentication.kubernetes.io/credential-id: - JTI=8e7ce0bc-c290-441c-9bc1-bae2b7534b78 authentication.kubernetes.io/node-name: - ip-10-0-143-252.us-east-2.compute.internal authentication.kubernetes.io/node-uid: - 6c0ff36a-9f69-4cfb-8984-83bc3bb4e25e authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-884576c57-zm5gt authentication.kubernetes.io/pod-uid: - 85891c17-d98b-4654-ba0c-744b0c23e723 groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 344a8ce8-4025-47e3-ac0b-8b81a1b9b031 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T00:29:31Z" lastUpdateTime: "2026-10-31T00:29:31Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-vwj7s" reason: AutoApproved status: "True" type: Approved